CVE-2023-53181: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: Stop leaking on krealloc failure Currently dmaresvgetfences will leak the previously allocated array if the fence iteration got restarted and the kreallocarray fails. Free the old array by hand, and make sure we...

CVE-2022-49935: Use After Free

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: check if the new fence is really later Previously when we added a fence to a dmaresv object we always assumed the the newer than all the existing fences. With Jason's work to add an UAPI to explicit export/impor...

PT-2022-33215

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.8 Description The issue is related to the dma-buf/dma-resv component, where a check is needed to ensure the new fence is really later. The actual impact and attack plausibility have not yet been proven...